6d714822f39837d939725fce691444cc10021f385742049523bc9a6d6a59b94e | Triage

Sharing

General

Target

6d714822f39837d939725fce691444cc10021f385742049523bc9a6d6a59b94e
Size

4.8MB
Sample

240912-3w4egascqr
MD5

337e81d13238a3abf061f6daac938420
SHA1

648029ebc8a315108bc005eab14c071fbed9755e
SHA256

6d714822f39837d939725fce691444cc10021f385742049523bc9a6d6a59b94e
SHA512

15fc86915ca3bd1c3c31ca9ec63e222dea1f6e5c43b62ad93ee8b8cab9e65397d17c581cf067d8bfb66d37af41916a4eb4c7452dc32243a17571cdd15249bf7f
SSDEEP

98304:uVeM4VwHuokyfn8PGcx2HynIiprw0F80XZsB3Y:cAVw3kx2SnIe84E3Y

Score

7^/10

bootkit discovery persistence

Malware Config

Targets

- Target
  
  6d714822f39837d939725fce691444cc10021f385742049523bc9a6d6a59b94e
- Size
  
  4.8MB
- MD5
  
  337e81d13238a3abf061f6daac938420
- SHA1
  
  648029ebc8a315108bc005eab14c071fbed9755e
- SHA256
  
  6d714822f39837d939725fce691444cc10021f385742049523bc9a6d6a59b94e
- SHA512
  
  15fc86915ca3bd1c3c31ca9ec63e222dea1f6e5c43b62ad93ee8b8cab9e65397d17c581cf067d8bfb66d37af41916a4eb4c7452dc32243a17571cdd15249bf7f
- SSDEEP
  
  98304:uVeM4VwHuokyfn8PGcx2HynIiprw0F80XZsB3Y:cAVw3kx2SnIe84E3Y
Score

7^/10

bootkit discovery persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Pre-OS Boot

Bootkit

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2

bootkitdiscoverypersistence